{"as_of":"2026-08-11T09:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c12e8e7318e012b5029aa195be557670e8e5a9f808aac16e6b88899d06ab88c2","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":8,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":8,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":8,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T17:30:21.286102Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":436,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2003.01690","last_updated":"2020-08-04T18:31:08Z","snapshot_observed_at":"2026-08-08T14:49:57.278643Z","submitted_at":"2020-03-03T18:15:55Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2003.01690","snapshot_observed_at":"2026-08-10T17:30:21.286102Z","title":"and Hein, M","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.12191","last_updated":"2026-06-20T15:49:55Z","snapshot_observed_at":"2026-08-10T22:51:04.401070Z","submitted_at":"2025-01-21T14:56:47Z","title":"HEM: a margin-based loss for visual categorisation tasks","version":2},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-10T17:30:21.286102Z"},"links":{"cited_paper":"/paper/2003.01690","citing_paper":"/paper/2501.12191"},"observation_digest":"sha256:e276f8b7f0625a24ad9e5e7d6dd68edad41b8cca2f9f338b7c72eedd34efda6d","observation_id":"94c1bce4-f1b1-4293-ab35-5d2d95fd3129","resolution":{"observed_at":"2026-08-10T17:30:21.286102Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2003.01690","last_updated":"2020-08-04T18:31:08Z","snapshot_observed_at":"2026-08-08T14:49:57.278643Z","submitted_at":"2020-03-03T18:15:55Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2003.01690","snapshot_observed_at":"2026-08-05T16:56:07.971877Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","venue":null,"work_id":null,"year":2003},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-08T11:27:24.534574Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:07.971877Z"},"links":{"cited_paper":"/paper/2003.01690","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:7523217c8d13f5411a7575d9ea05a8bb1ab305fdcc7e2f2cc28484413749d507","observation_id":"2c851804-4247-479b-8407-5900e1c61080","resolution":{"observed_at":"2026-08-05T16:56:07.971877Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2003.01690","last_updated":"2020-08-04T18:31:08Z","snapshot_observed_at":"2026-08-08T14:49:57.278643Z","submitted_at":"2020-03-03T18:15:55Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","version":2},"cited_work":{"arxiv_id":"2003.01690","doi":"10.48550/arxiv.2003.01690","metadata_source":"arxiv_reference","pith_arxiv_id":"2003.01690","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","venue":"arXiv (Cornell University)","work_id":"a30dcfbc-75cb-4359-bdd2-2e7503ba819e","year":2020},"citing_paper":{"arxiv_id":"2604.14457","last_updated":"2026-04-15T22:23:40Z","snapshot_observed_at":"2026-07-06T23:02:13.885476Z","submitted_at":"2026-04-15T22:23:40Z","title":"NeuroTrace: Inference Provenance-Based Detection of Adversarial Examples","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-10T12:30:35.538954Z"},"links":{"cited_paper":"/paper/2003.01690","citing_paper":"/paper/2604.14457"},"observation_digest":"sha256:93d62476ca0723d8c4882af39cf80f0e7e36fa88941a02a5c797415abf594f72","observation_id":"c672313d-f70b-48da-99cc-72b1794fda10","resolution":{"observed_at":"2026-05-11T11:51:02.043694Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2003.01690","last_updated":"2020-08-04T18:31:08Z","snapshot_observed_at":"2026-08-08T14:49:57.278643Z","submitted_at":"2020-03-03T18:15:55Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","version":2},"cited_work":{"arxiv_id":"2003.01690","doi":"10.48550/arxiv.2003.01690","metadata_source":"arxiv_reference","pith_arxiv_id":"2003.01690","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","venue":"arXiv (Cornell University)","work_id":"a30dcfbc-75cb-4359-bdd2-2e7503ba819e","year":2020},"citing_paper":{"arxiv_id":"2604.20704","last_updated":"2026-04-22T15:46:11Z","snapshot_observed_at":"2026-07-06T23:07:25.185196Z","submitted_at":"2026-04-22T15:46:11Z","title":"Auto-ART: Structured Literature Synthesis and Automated Adversarial Robustness Testing","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-10T00:39:43.196010Z"},"links":{"cited_paper":"/paper/2003.01690","citing_paper":"/paper/2604.20704"},"observation_digest":"sha256:d46929603af361de59ef23b239ac19503aca2d1e3bd434b739e32ecd757d077e","observation_id":"eccb6f1e-ebde-433e-af15-8b560b1c79f3","resolution":{"observed_at":"2026-05-10T00:39:48.178264Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2003.01690","last_updated":"2020-08-04T18:31:08Z","snapshot_observed_at":"2026-08-08T14:49:57.278643Z","submitted_at":"2020-03-03T18:15:55Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","version":2},"cited_work":{"arxiv_id":"2003.01690","doi":"10.48550/arxiv.2003.01690","metadata_source":"arxiv_reference","pith_arxiv_id":"2003.01690","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","venue":"arXiv (Cornell University)","work_id":"a30dcfbc-75cb-4359-bdd2-2e7503ba819e","year":2020},"citing_paper":{"arxiv_id":"2606.00738","last_updated":"2026-05-30T14:10:32Z","snapshot_observed_at":"2026-08-02T13:09:12.393810Z","submitted_at":"2026-05-30T14:10:32Z","title":"SORA: Free Second-Order Attacks in Fast Adversarial Training","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-06-28T19:05:06.136594Z"},"links":{"cited_paper":"/paper/2003.01690","citing_paper":"/paper/2606.00738"},"observation_digest":"sha256:d0f821ffe46ad27711d032f9be198f5a1f9eacacd776ecb96cda169191ed89c5","observation_id":"8a5b8252-0bad-4ede-88da-4d85e7608ec6","resolution":{"observed_at":"2026-06-28T19:12:35.086523Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2003.01690","last_updated":"2020-08-04T18:31:08Z","snapshot_observed_at":"2026-08-08T14:49:57.278643Z","submitted_at":"2020-03-03T18:15:55Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","version":2},"cited_work":{"arxiv_id":"2003.01690","doi":"10.48550/arxiv.2003.01690","metadata_source":"arxiv_reference","pith_arxiv_id":"2003.01690","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","venue":"arXiv (Cornell University)","work_id":"a30dcfbc-75cb-4359-bdd2-2e7503ba819e","year":2020},"citing_paper":{"arxiv_id":"2606.02267","last_updated":"2026-06-01T13:53:39Z","snapshot_observed_at":"2026-08-08T03:33:53.833251Z","submitted_at":"2026-06-01T13:53:39Z","title":"A combination of noise and bilateral filters achieve supralinear and scalable adversarial robustness in CNNs","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-28T15:23:26.461740Z"},"links":{"cited_paper":"/paper/2003.01690","citing_paper":"/paper/2606.02267"},"observation_digest":"sha256:e713a44e941ef537eeac840dba497c0a13993097905e80b2ef5b4cd6258e4bce","observation_id":"abe10585-b5d0-4c84-b673-8daa8209ea1d","resolution":{"observed_at":"2026-07-01T22:26:17.806860Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2003.01690","last_updated":"2020-08-04T18:31:08Z","snapshot_observed_at":"2026-08-08T14:49:57.278643Z","submitted_at":"2020-03-03T18:15:55Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","version":2},"cited_work":{"arxiv_id":"2003.01690","doi":"10.48550/arxiv.2003.01690","metadata_source":"arxiv_reference","pith_arxiv_id":"2003.01690","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","venue":"arXiv (Cornell University)","work_id":"a30dcfbc-75cb-4359-bdd2-2e7503ba819e","year":2020},"citing_paper":{"arxiv_id":"2606.09881","last_updated":"2026-06-03T05:44:29Z","snapshot_observed_at":"2026-07-06T23:49:08.412079Z","submitted_at":"2026-06-03T05:44:29Z","title":"Toward Calibrated, Fair, and accurate Deepfake Detection","version":1},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-06-28T07:05:18.026601Z"},"links":{"cited_paper":"/paper/2003.01690","citing_paper":"/paper/2606.09881"},"observation_digest":"sha256:87e1b83fa35e0b9e4ea1ae8eeb17b93964b855b3ab324cf4dfac676d6c859fb6","observation_id":"51d3bd4e-d395-40d1-a859-c1eb5d5d6a7d","resolution":{"observed_at":"2026-06-28T07:11:45.169761Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2003.01690","last_updated":"2020-08-04T18:31:08Z","snapshot_observed_at":"2026-08-08T14:49:57.278643Z","submitted_at":"2020-03-03T18:15:55Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2003.01690","snapshot_observed_at":"2026-08-02T15:02:58.558426Z","title":"Dubey, A","venue":null,"work_id":null,"year":2003},"citing_paper":{"arxiv_id":"2607.21600","last_updated":"2026-05-03T19:21:06Z","snapshot_observed_at":"2026-08-06T09:31:16.482834Z","submitted_at":"2026-05-03T19:21:06Z","title":"Securing Multimodal AI through Internal Information Decomposition","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-02T15:02:58.558426Z"},"links":{"cited_paper":"/paper/2003.01690","citing_paper":"/paper/2607.21600"},"observation_digest":"sha256:a4d5e31edb42a911cc54592ef0ea94447ce936b9cb5e4540fb8c24258055c611","observation_id":"de3c4701-412d-4acb-8dd5-e3329bb092c8","resolution":{"observed_at":"2026-08-02T15:02:58.558426Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2003.01690/citation-record","integrity":"/paper/2003.01690/integrity","json":"/paper/2003.01690/citation-record.json","paper":"/paper/2003.01690"},"outbound":[],"paper":{"arxiv_id":"2003.01690","last_updated":"2020-08-04T18:31:08Z","latest_version":2,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-08T14:49:57.278643Z","submitted_at":"2020-03-03T18:15:55Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 8 inbound Pith citation observations for arXiv:2003.01690."}